#!

# Create a sensor that is used to show who is downloading
# filesize bigger as "file-size" definition!

###########################
# DLP Settings 
###########################
config dlp sensor
edit mydomain1-default.local
set comment "dlp default profile mydomain1.ch"
unset replacemsg-group 
#set summary-proto smtp pop3 imap http-get http-post
unset summary-proto
config filter
edit 1
set name ''
set severity medium
set type file
set proto http-get http-post ftp
set filter-by file-size
set file-size 102400
set archive disable
set action log-only
next
end
set nac-quar-log enable
set dlp-log enable
set flow-based disable 
unset full-archive-proto
unset summary-proto
end